共收录 945 条相关情报。
← 返回所有主题CVE-2026-19826
A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of
CVE-2026-10571
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecu
CVE-2026-66256
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects A
CVE-2026-28176
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
CVE-2026-27380
Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.
CVE-2026-67579
Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter
CVE-2026-73325
Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers t
CVE-2026-67587
Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports
CVE-2026-67260
Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the
CVE-2026-59242
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload th
CVE-2026-58076
Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken fr
CVE-2026-68756
A party with write access to stored session data may affect JFrog Artifactory under specific conditions.
CVE-2026-18634
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (B
CVE-2026-18634
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (B
CVE-2026-48397
Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code e
CVE-2026-70321
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
CVE-2026-66808
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
CVE-2026-66805
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
CVE-2026-65815
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code